Privacy notice

BonjourBase is a service operated by C.S. VENTURE LAB (SASU (société par actions simplifiée unipersonnelle), SIREN 130 812 811, RCS Le Puy-en-Velay) that helps people moving to France with deadlines, plain-language guides, a community forum, a cost-of-living calculator, French lessons and a directory of businesses run by fellow expats. C.S. VENTURE LAB is the data controller for the personal data described here.

• Account data — your email address and, if you sign in with Google, the basic profile information Google returns.
• Relocation profile — name, nationality, country of origin, relocation stage, arrival date, visa type and expiry, city and driving-licence answers, as you enter them.
• Deadlines, household and comparisons — your deadlines and their status, household members you add (name, relation, optional birth date) and saved city comparisons. Checklist ticks stay in your browser.
• Community content — topics, replies, listings and reviews you post, including whether you posted anonymously.
• Reports and blocks — content you report, the reason and comment you give, and members you block.
• Assistant conversations — the messages you exchange with Ask BonjourBase.
• Letter summaries — the summary, deadlines and next steps produced from letters you upload (see below).
• Learning progress — lessons completed, scores, streaks and badges.
• Subscription status — whether you have BonjourBase Plus, the plan and renewal date, as reported by Paddle. We never receive your card details.
• Technical data — standard server logs (such as IP address and request details).

• To provide your account and the features you ask for (deadlines, guides, directory, community, assistant, letter explainer, lessons, Plus) — performance of a contract.
• To send email reminders you switched on — consent, which you can withdraw at any time.
• To keep the service secure, prevent abuse, handle reports and moderate content — legitimate interests.
• To keep accounting and tax records for paid features — legal obligation.
• Optional functional and analytics storage in your browser — consent, via cookie settings.

Anonymous posting hides your name from other members. It does not make the post anonymous to us: we still know which account created it, so we can moderate.

With the Plus letter explainer you can upload a photo or PDF of an official letter. The file is stored in a private storage area, sent to our AI model provider to produce a summary, and deleted right after processing. We keep only the summary, the deadlines it found and the suggested next steps, until you delete them or your account. Avoid uploading letters about other people unless you are entitled to.

If you switch on email reminders (Plus), we use your email address and deadline titles and dates to send a reminder 7 days and 1 day before each deadline. Every email has an unsubscribe link, and you can switch reminders off on your dashboard.

When you report a topic, reply, listing or review, we store your account, the item, the reason and any comment, and notify our moderation team at privacy@bonjourbase.eu. The person you report is not told who reported them. Reports are kept for up to 12 months after review, or longer where needed to handle a dispute or a request from the authorities.

• Lovable (Lovable Labs Incorporated, USA) — application hosting.
• Supabase — database, authentication and file storage.
• AI model provider (OpenAI, reached through the Lovable AI Gateway) — generates answers for Ask BonjourBase and summaries for the letter explainer. Only the message or letter and relevant profile and guide context are sent.
• Paddle (Paddle.com Market Ltd) — merchant of record for BonjourBase Plus and featured listings: checkout, payment, tax, invoices and refunds. Paddle is an independent controller for payment data.
• Email provider — Lovable's managed email service sends sign-in, reminder and notification emails.
• Connected agents — if you approve an external AI agent to connect to BonjourBase, it can access the data you consented to until you revoke it.

Some providers process data outside the EEA, notably in the United States. Transfers rely on the EU-US Data Privacy Framework where the provider is certified, or on the EU Standard Contractual Clauses. We also share data with professional advisers or authorities where the law requires. We do not sell your personal data.

We keep your account data and content for as long as your account exists. If you delete your account, your profile, deadlines, household, comparisons, letter summaries, listings, reviews, reports and assistant history are deleted and your community posts are anonymised so threads remain readable. Payment records held by Paddle and our accounting records are kept for 10 years, as French commercial law requires. See how to delete your account.

Data is encrypted in transit and at rest, access is restricted by role, and uploaded letters sit in private storage until they are deleted.

Under the GDPR you can access, correct, delete and port your data, restrict or object to processing, and withdraw consent at any time. We answer within one month. Two requests are built into the app:

• Access and portability — download your data as a JSON file from your account page.
• Erasure — delete your account from the same page, or email us.

For anything else, email privacy@bonjourbase.eu.

If you think we have not handled your data properly, you can complain to the French data protection authority, the CNIL (Commission Nationale de l'Informatique et des Libertés), 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or online at cnil.fr. You can also complain to the authority in the EU country where you live.

We do not use advertising trackers. See the cookie and local storage notice.

BonjourBase is not intended for children under 16.

If we change this notice we will update the date at the top and, for significant changes, tell you in the app.